Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	faker

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): replace dependency faker with @faker-js/faker
• chore(deps): update dependency postcss to v8.5.10
• fix(deps): update dependency @headlessui/react to v2.2.10
• fix(deps): update dependency validator to v13.15.35
• chore(deps): update dependency autoprefixer to v10.5.0
• chore(deps): update dependency cypress to v15.14.0
• fix(deps): update dependency @oclif/core to v4.10.5
• fix(deps): update dependency graphql to v16.13.2
• fix(deps): update dependency knex to v3.2.9
• fix(deps): update dependency mysql2 to v3.22.1
• fix(deps): update dependency react-hook-form to v7.72.1
• chore(deps): update actions/setup-node action to v6
• chore(deps): update cypress-io/github-action action to v7
• chore(deps): update dependency coveralls-next to v6
• chore(deps): update dependency eslint-plugin-cypress to v6
• chore(deps): update dependency jest to v30
• chore(deps): update dependency typescript to v6
• chore(deps): update dependency uuid to v14
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update mysql docker tag to v9
• chore(deps): update nextjs monorepo to v16 (major) (@next/bundle-analyzer, @next/eslint-plugin-next)
• fix(deps): update dependency @apollo/server-plugin-response-cache to v5
• fix(deps): update dependency @graphql-tools/utils to v11
• fix(deps): update dependency @koa/router to v15
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency inquirer to v13
• fix(deps): update dependency koa to v3
• fix(deps): update dependency koa-etag to v5
• fix(deps): update dependency koa-pino-logger to v5
• fix(deps): update dependency koa-session to v7
• fix(deps): update dependency next-seo to v7
• fix(deps): update dependency pino to v10
• fix(deps): update dependency rate-limiter-flexible to v11
• fix(deps): update dependency require-environment-variables to v2
• fix(deps): update dependency tailwindcss to v4
• fix(deps): update react monorepo to v19 (major) (react, react-dom)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(deps): update dependency @oclif/test to v4.1.18
• chore(deps): update dependency nock to v14.0.12
• fix(deps): update dependency @graphql-tools/schema to v10.0.32
• fix(deps): update dependency @oclif/plugin-help to v6.2.44

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency next to v15 [security]
• chore(deps): update dependency standard to v17
• fix(deps): update dependency chalk to v5
• fix(deps): update dependency graphql-request to v7
• fix(deps): update dependency hibp to v15
• fix(deps): update dependency nanoid to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency faker to v6

Detected Dependencies

docker-compose (4)

docker-compose.e2e-overlay.yml

docker-compose.prod-no-db.yml

docker-compose.prod.yml (1)

• mysql 8.4 → [Updates: 9.6]

docker-compose.yml (1)

• mysql 8.4 → [Updates: 9.6]

dockerfile (1)

Dockerfile (4)

• docker/dockerfile 1
• node 24-alpine
• node 24-alpine
• node 24-alpine

github-actions (2)

.github/workflows/build.yaml (19)

• actions/checkout v6
• actions/setup-node v4 → [Updates: v6]
• actions/cache v5
• cypress-io/github-action v6.10.9@f790eee7a50d9505912f50c2095510be7de06aa7 → [Updates: v7.1.9]
• coverallsapp/github-action master
• actions/checkout v6
• actions/setup-node v4 → [Updates: v6]
• actions/cache v5
• cypress-io/github-action v6.10.9@f790eee7a50d9505912f50c2095510be7de06aa7 → [Updates: v7.1.9]
• actions/checkout v6
• actions/checkout v6
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]
• actions/setup-node v4 → [Updates: v6]
• actions/cache v5
• cypress-io/github-action v6.10.9@f790eee7a50d9505912f50c2095510be7de06aa7 → [Updates: v7.1.9]
• coverallsapp/github-action master
• node 24.x
• node 24.x

.github/workflows/deploy_docker.yaml (10)

• actions/checkout v6
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.1.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.0.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.1.0]
• actions/upload-artifact v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.1.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.0.0]

npm (2)

package.json (110)

• @acusti/react-code-input 3.11.0
• @apollo/server ^5.0.0
• @apollo/server-plugin-response-cache ^4.1.3 → [Updates: ^5.0.0]
• @as-integrations/koa ^1.1.1
• @confuser/db-migrate-mysql 2.4.0
• @graphql-tools/schema 10.0.31 → [Updates: 10.0.32]
• @graphql-tools/utils 10.11.0 → [Updates: 11.0.1]
• @headlessui/react 2.2.9 → [Updates: 2.2.10]
• @koa/cors ^5.0.0
• @koa/multer ^4.0.0
• @koa/router 13.1.1 → [Updates: 15.4.0]
• @leichtgewicht/ip-codec 2.0.5
• @nateradebaugh/react-datetime 4.6.0
• @nivo/core 0.99.0
• @nivo/line 0.99.0
• @nivo/pie 0.99.0
• @oclif/core 4.8.4 → [Updates: 4.10.5]
• @oclif/plugin-help 6.2.40 → [Updates: 6.2.44]
• @odiffey/discord-markdown ^3.3.0
• @rpldy/upload-button ^1.13.0
• @rpldy/upload-drop-zone ^1.13.0
• @rpldy/upload-paste ^1.13.0
• @rpldy/upload-preview ^1.13.0
• @rpldy/uploady ^1.13.0
• @universemc/react-palette 1.0.3
• argon2 0.44.0
• chalk 4.1.2 → [Updates: 5.6.2]
• clsx 2.1.1
• dataloader 2.2.3
• date-fns 4.1.0
• db-migrate 1.0.0-beta.35
• dotenv 16.6.1 → [Updates: 17.4.2]
• edit-dotenv 1.0.4
• es6-dynamic-template 2.0.0
• filesize-parser ^1.5.1
• graphql 16.12.0 → [Updates: 16.13.2]
• graphql-constraint-directive 6.0.0
• graphql-depth-limit 1.1.0
• graphql-parse-resolve-info 4.14.1
• graphql-request 6.1.0 → [Updates: 7.4.0]
• graphql-tag ^2.12.6
• graphql-type-json 0.3.2
• hibp 14.1.3 → [Updates: 15.2.1]
• inquirer 8.2.7 → [Updates: 13.4.2]
• js-yaml 4.1.1
• knex 3.1.0 → [Updates: 3.2.9]
• knex-on-duplicate-update 2.3.3
• koa 2.16.4 → [Updates: 3.2.0]
• koa-bodyparser 4.4.1
• koa-conditional-get 3.0.0
• koa-etag 4.0.0 → [Updates: 5.0.0]
• koa-pino-logger 4.0.0 → [Updates: 5.0.0]
• koa-send 5.0.1
• koa-session 6.4.0 → [Updates: 7.0.2]
• lodash-es 4.18.1
• memoizee 0.4.17
• multer ^2.0.2
• mysql2 3.17.3 → [Updates: 3.22.1]
• nanoid 3.3.11 → [Updates: 5.1.9]
• next 14.2.35 → [Updates: 15.5.15]
• next-absolute-url 1.2.2
• next-intl ^4.9.1
• next-seo 6.8.0 → [Updates: 7.2.0]
• nextjs-url 1.0.4
• opentype.js 1.3.4
• pino 9.14.0 → [Updates: 10.3.1]
• points 3.2.0
• rate-limiter-flexible 5.0.5 → [Updates: 11.0.1]
• react 18.3.1 → [Updates: 19.2.5]
• react-dom 18.3.1 → [Updates: 19.2.5]
• react-favicon 2.0.7
• react-hook-form 7.71.2 → [Updates: 7.72.1]
• react-icons 5.6.0
• react-remove-scroll 2.7.2
• react-select 5.10.2
• request-ip 3.3.0
• require-environment-variables 1.2.0 → [Updates: 2.0.0]
• semver 7.7.4
• sharp 0.34.5
• svg-points 6.0.1
• swr 2.4.1
• tailwindcss 3.4.19 → [Updates: 4.2.2]
• uuid-parse 1.1.0
• validator 13.15.26 → [Updates: 13.15.35]
• web-push 3.6.7
• @babel/eslint-parser 7.28.6
• @next/bundle-analyzer 14.2.35 → [Updates: 16.2.4]
• @next/eslint-plugin-next 14.2.35 → [Updates: 16.2.4]
• @oclif/test 4.1.17 → [Updates: 4.1.18]
• autoprefixer 10.4.27 → [Updates: 10.5.0]
• coveralls-next 4.2.2 → [Updates: 6.0.1]
• cypress 15.10.0 → [Updates: 15.14.0]
• eslint-plugin-cypress 4.3.0 → [Updates: 6.3.1]
• eslint-plugin-react 7.37.5
• faker 5.5.3 → [Updates: 6.6.6, 5.5.3]
• git-revision-webpack-plugin 5.0.0
• jest 29.7.0 → [Updates: 30.3.0]
• json-to-graphql-query 2.3.0
• mockdate 3.0.5
• nixt 0.5.1
• nock ^14.0.0-beta.6 → [Updates: ^14.0.0-beta.6]
• nodemon 3.1.14
• postcss 8.5.8 → [Updates: 8.5.10]
• standard 16.0.4 → [Updates: 17.1.2]
• standardx 7.0.0
• supertest 7.2.2
• typescript ^5.7.2 → [Updates: ^6.0.0]
• url-loader 4.1.1
• uuid 11.1.0 → [Updates: 14.0.0]
• node 22 || 24

server/data/migrations/package.json

---

• Check this box to trigger a request for Renovate to run again on this repository